Fallos del tipo CWE-77

2960 resultados

Injeção de comando via entrada não sanitizada

O software constrói comandos (shell, SQL, LDAP, etc.) usando dados de entrada do usuário sem neutralizar caracteres especiais que alteram a semântica do comando. Um atacante injeta metacaracteres (como `;`, `|`, `$()`) para executar instruções não previstas.

Ejemplo

Um script PHP que executa `system('ping ' . $_GET['host'])` sem validação. Um atacante passa `8.8.8.8; rm -rf /` e consegue deletar arquivos, porque o ponto-e-vírgula encadeia comandos no shell.

Cómo mitigar

Use APIs de execução que separam dados de comando (ex: `execvp()` com array de argumentos em vez de shell, prepared statements para SQL). Se shell for inevitável, whitelist rigoroso de entrada e escape apropriado com `escapeshellarg()` ou equivalente na linguagem.

CVE-2024-11656MEDIUMEnGenius ENH1350EXT/ENS500-AC/ENS620EXT diag_ping6 command injectionEPSS 28.8%CVE-2023-0861HIGHAuthenticated Command Injection in NetModule NSRWEPSS 28.7%CVE-2026-2537MEDIUMComfast CF-E4 HTTP POST Request mbox-config command injectionEPSS 28.0%CVE-2024-11651MEDIUMEnGenius ENH1350EXT/ENS500-AC/ENS620EXT wifi_schedule command injectionEPSS 27.4%CVE-2025-8956MEDIUMD-Link DIR‑818L ssdpcgi cgibin getenv command injectionEPSS 27.1%CVE-2025-70161CRITICALEDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection. This arises because the pppUserName field is directly passed to a shell commandEPSS 27.1%CVE-2024-10697MEDIUMTenda AC6 API Endpoint WriteFacMac formWriteFacMac command injectionEPSS 26.2%CVE-2024-7715MEDIUMD-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injectionEPSS 26.2%CVE-2019-12650HIGHCisco IOS XE Software Web UI Command Injection VulnerabilitiesEPSS 26.1%CVE-2023-1162HIGHDrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injectionEPSS 26.0%CVE-2024-25228HIGHVinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function iEPSS 25.9%CVE-2025-60021CRITICALApache bRPC: Remote command injection vulnerability in heap builtin serviceEPSS 25.7%CVE-2023-31983CRITICALA Command Injection vulnerability in Edimax Wireless Router N300 Firmware BR-6428NS_v4 allows attacker to execute arbitrary code via the mp EPSS 24.9%CVE-2025-53107HIGH@cyanheads/git-mcp-server vulnerable to command injection in several toolsEPSS 24.5%CVE-2025-7952MEDIUMTOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injectionEPSS 24.5%CVE-2025-5438MEDIUMLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 WPS command injectionEPSS 24.5%CVE-2024-8132MEDIUMD-Link DNS-1550-04 HTTP POST Request webdav_mgr.cgi webdav_mgr command injectionEPSS 24.4%CVE-2024-4884CRITICALWhatsUp Gold CommunityController Unrestricted File Upload Remote Code Execution VulnerabilityEPSS 24.3%CVE-2025-31644HIGHAppliance mode BIG-IP iControl REST and tmsh vulnerabilityEPSS 24.3%CVE-2025-4341MEDIUMD-Link DIR-880L Request Header ssdpcgi sub_16570 command injectionEPSS 24.0%